Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32332d3233203d3e20323634343032.roa
File:                     3133312e3136312e36382e302f32332d3233203d3e20323634343032.roa (raw, json)
Hash identifier:          dAV+Fa0psb/SuhjLbZXR2nvuw/ssysOaY6g94qf1eaE=
Subject key identifier:   F3:35:4E:FC:4C:89:FB:63:4C:83:2D:B6:EC:B3:48:79:79:11:F2:81
Certificate issuer:       /CN=32B33E97AD56840DAA72E96945DEB5B162A08280
Certificate serial:       07CEFB273F96DAF36B88ED49AD97F3509199FF1C
Authority key identifier: 32:B3:3E:97:AD:56:84:0D:AA:72:E9:69:45:DE:B5:B1:62:A0:82:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B33E97AD56840DAA72E96945DEB5B162A08280.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32332d3233203d3e20323634343032.roa
Signing time:             Fri 29 Apr 2022 12:55:46 +0000
ROA not before:           Fri 29 Apr 2022 12:50:46 +0000
ROA not after:            Fri 28 Apr 2023 12:55:46 +0000
asID:                     264402
IP address blocks:        131.161.68.0/23 maxlen: 23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:ce:fb:27:3f:96:da:f3:6b:88:ed:49:ad:97:f3:50:91:99:ff:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=32B33E97AD56840DAA72E96945DEB5B162A08280
        Validity
            Not Before: Apr 29 12:50:46 2022 GMT
            Not After : Apr 28 12:55:46 2023 GMT
        Subject: CN=F3354EFC4C89FB634C832DB6ECB348797911F281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:75:41:01:82:b7:14:8d:c4:3a:35:56:47:55:
                    a4:f0:2c:2d:f6:47:53:3d:e6:7a:41:ff:86:10:5e:
                    2d:7b:8b:8f:47:4d:2c:2c:33:b3:a8:8d:2f:e9:27:
                    10:cf:6c:1c:13:8b:a3:60:6a:dd:59:02:a2:55:32:
                    10:3f:4b:1d:16:69:92:17:d5:3b:ca:6a:58:c8:4e:
                    28:f9:02:6e:a0:fa:26:ca:49:78:33:c6:57:8f:13:
                    11:dc:c4:a7:69:f2:3e:02:1e:05:6f:b9:ee:bc:30:
                    25:a2:c6:9a:19:00:74:92:6e:38:bf:84:98:9e:0d:
                    4f:9f:40:63:77:2f:8a:14:df:b4:b1:a9:61:dc:a8:
                    3b:42:d5:8d:94:d9:98:9c:26:f4:2d:82:37:12:3d:
                    07:82:3f:a6:a7:69:30:d5:14:e7:d4:1e:33:7c:c4:
                    37:26:71:a3:b2:8c:5f:e0:6e:c6:14:3f:fa:8f:8e:
                    79:d6:0f:dd:be:87:46:48:96:27:4a:d4:78:b1:42:
                    dd:67:7b:b6:19:61:43:69:af:5a:76:13:82:2a:4d:
                    2a:09:84:3e:3e:6c:55:d2:20:eb:5a:5c:12:f5:ad:
                    33:22:73:1b:35:fb:12:96:bb:6e:6f:31:66:47:a0:
                    a8:39:61:67:bb:7e:d5:f9:10:24:c1:2b:f0:c4:f5:
                    25:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:35:4E:FC:4C:89:FB:63:4C:83:2D:B6:EC:B3:48:79:79:11:F2:81
            X509v3 Authority Key Identifier:
                keyid:32:B3:3E:97:AD:56:84:0D:AA:72:E9:69:45:DE:B5:B1:62:A0:82:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/32B33E97AD56840DAA72E96945DEB5B162A08280.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/32B33E97AD56840DAA72E96945DEB5B162A08280.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHD7QrPPiBaaWKL9npqysKJ2CSi3KKCJXDfSsTreJMHw/0/3133312e3136312e36382e302f32332d3233203d3e20323634343032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:ad:7f:14:0c:63:81:cc:01:48:d1:a3:c8:aa:29:58:7f:e4:
         cd:82:c3:fd:cf:8a:fd:08:24:65:bb:6a:2d:58:ac:72:f4:de:
         99:f4:5e:87:14:1c:b1:91:cb:82:a1:ec:a9:be:53:cc:9b:e1:
         cc:7c:1a:21:23:2b:1f:b8:61:f6:0b:07:7a:9a:c7:70:5d:1b:
         7e:e6:64:21:64:9b:18:56:37:13:16:3a:a6:0f:9c:2e:b1:d5:
         5c:6c:ce:8a:0a:20:86:19:7a:26:40:89:29:ac:0c:f0:d3:e4:
         14:42:64:8c:a3:96:3d:63:22:d4:a7:e7:fe:25:dd:c9:97:bc:
         70:6e:50:35:2e:08:05:9e:5b:23:d3:f3:55:8b:42:45:9b:7f:
         cd:19:74:d1:07:93:b5:a5:e3:bc:fa:39:56:67:a8:52:07:5d:
         72:72:c5:0b:44:bc:fd:97:31:58:fe:3e:a3:e9:d3:eb:f0:93:
         62:76:98:41:f7:e8:63:c8:8e:65:9d:3c:5e:d8:c7:4d:43:96:
         00:d4:c2:20:70:b6:03:a1:74:71:e5:2d:50:bc:15:3e:e2:23:
         c0:fb:36:2b:7b:b3:2d:79:04:d1:31:f1:45:ef:7f:45:a5:18:
         f4:7a:a0:ac:48:1e:d1:85:23:09:49:34:52:57:cb:59:57:17:
         ca:36:2c:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org